$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4994e4e2-9da0-36a8-be4d-a94314cb9328.roa File: 4994e4e2-9da0-36a8-be4d-a94314cb9328.roa (raw, json) Hash identifier: 01acUqTnQ5/lZ6rQ9uSuUonsk5XiodGbTop+cJYMSqQ= Subject key identifier: 99:EC:F2:BF:C6:0E:55:F0:47:C2:CA:B6:F8:A4:42:59:B2:56:67:35 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584CE56174E09CAEA6F907FA0300 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4994e4e2-9da0-36a8-be4d-a94314cb9328.roa Signing time: Tue 17 Feb 2026 19:11:07 +0000 ROA not before: Tue 17 Feb 2026 19:11:07 +0000 ROA not after: Mon 18 May 2026 18:11:07 +0000 asID: 265919 IP address blocks: 107.149.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e5:61:74:e0:9c:ae:a6:f9:07:fa:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Feb 17 19:11:07 2026 GMT Not After : May 18 18:11:07 2026 GMT Subject: CN=fbf680d0-8c5c-495b-8d39-08afd89f1e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:40:78:23:1f:93:b7:78:2d:bd:18:4c:a1:78: 09:8f:e2:21:54:ae:f5:01:1a:fb:38:59:29:c3:74: c2:c9:2d:f5:53:b6:2b:95:1b:0e:e4:43:03:45:05: 8c:3a:ae:94:c4:10:7f:91:a7:8a:01:68:a4:f9:e6: cb:97:f3:58:df:5a:97:4b:fc:c9:a8:51:e3:ae:70: 3e:6c:f4:af:9d:fb:7a:3f:38:54:e6:bb:57:82:4e: 87:a8:0e:4b:8f:c5:7e:80:b3:bf:be:a5:33:f5:f6: d5:59:90:94:71:c2:72:20:5b:7a:57:90:1c:3b:c5: 49:85:9e:4f:14:52:83:2f:c8:cf:01:02:cd:4a:f7: 92:a6:8e:90:db:85:ea:08:16:b6:b5:bc:e0:2e:dc: 89:6e:8a:2d:a6:9a:6f:b2:4d:1b:b6:ec:fa:b2:b4: c9:f0:51:2b:a4:8a:72:d7:71:41:8c:58:29:60:35: 5d:d3:e1:b5:c0:ed:a8:93:2a:47:7d:59:75:4c:e2: f9:48:dc:dc:25:0d:82:3c:89:96:50:c5:ca:2f:b8: 99:75:69:b5:68:43:f4:25:b6:81:f1:2e:41:ca:cb: 81:a2:76:26:22:ed:6b:7c:b0:a1:0e:3d:c1:b9:d6: 3e:3a:5b:e2:b0:e4:65:3b:81:62:de:4c:72:5b:98: 3b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EC:F2:BF:C6:0E:55:F0:47:C2:CA:B6:F8:A4:42:59:B2:56:67:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4994e4e2-9da0-36a8-be4d-a94314cb9328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d7:3c:b1:ce:42:5f:96:b6:d0:f4:33:e2:82:67:6f:3e:ce: 86:5f:5d:ef:a7:ba:1a:e9:dc:ac:28:42:06:23:cc:cb:42:33: 53:27:b9:13:ee:c7:c7:ea:4b:44:5c:fd:ee:e3:72:0e:b5:ab: fa:37:b2:76:ce:a8:03:74:9a:f7:f5:a1:00:b8:18:b8:3c:cd: 0e:ff:be:30:0a:59:b5:4b:0a:3b:9f:97:df:42:e3:7f:b4:65: bb:5f:5a:ff:ec:35:44:38:2a:8c:b2:d9:48:27:0f:b2:a2:94: e8:90:58:74:c3:f0:2a:1d:a4:ab:96:e8:ad:e8:f0:4a:b5:e2: 4d:95:84:9b:4f:a8:6b:7b:7e:b7:b1:d5:46:de:fc:8f:49:6b: f7:be:53:8f:d9:5f:b9:a0:40:d1:93:1b:46:20:01:99:0e:2f: 6e:4c:29:c8:6c:0f:b7:69:00:93:52:be:0e:d0:bb:9f:de:e2: f9:7f:89:83:81:04:37:a1:0a:35:d5:1d:d5:ca:c5:27:8f:7d: e9:26:7a:b9:cc:fe:84:7f:44:6b:f1:99:4b:dd:2e:bd:73:b1: b1:3d:68:9d:08:b0:87:1a:47:69:e9:fc:d5:52:8b:e6:b0:e7: 61:e4:c9:29:10:64:b6:09:d8:fe:a8:2c:32:37:c0:ba:82:29: d4:9a:4b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzlYXTgnK6m+Qf6AwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDIxNzE5MTEwN1oXDTI2MDUxODE4MTEwN1owLzEtMCsGA1UEAxMk ZmJmNjgwZDAtOGM1Yy00OTViLThkMzktMDhhZmQ4OWYxZTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUB4Ix+Tt3gtvRhMoXgJj+IhVK71ARr7OFkp w3TCyS31U7YrlRsO5EMDRQWMOq6UxBB/kaeKAWik+ebLl/NY31qXS/zJqFHjrnA+ bPSvnft6PzhU5rtXgk6HqA5Lj8V+gLO/vqUz9fbVWZCUccJyIFt6V5AcO8VJhZ5P FFKDL8jPAQLNSveSpo6Q24XqCBa2tbzgLtyJbootpppvsk0btuz6srTJ8FErpIpy 13FBjFgpYDVd0+G1wO2okypHfVl1TOL5SNzcJQ2CPImWUMXKL7iZdWm1aEP0JbaB 8S5BysuBonYmIu1rfLChDj3BudY+OlvisORlO4Fi3kxyW5g70wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJns8r/GDlXwR8LKtvikQlmyVmc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNDk5NGU0ZTItOWRhMC0z NmE4LWJlNGQtYTk0MzE0Y2I5MzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5WZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDXPLHOQl+WttD0M+KCZ28+zoZfXe+nuhrp3KwoQgYjzMtCM1MnuRPu x8fqS0Rc/e7jcg61q/o3snbOqAN0mvf1oQC4GLg8zQ7/vjAKWbVLCjufl99C43+0 ZbtfWv/sNUQ4Koyy2UgnD7KilOiQWHTD8CodpKuW6K3o8Eq14k2VhJtPqGt7frex 1Ube/I9Ja/e+U4/ZX7mgQNGTG0YgAZkOL25MKchsD7dpAJNSvg7Qu5/e4vl/iYOB BDehCjXVHdXKxSePfekmernM/oR/RGvxmUvdLr1zsbE9aJ0IsIcaR2np/NVSi+aw 52HkySkQZLYJ2P6oLDI3wLqCKdSaS34= -----END CERTIFICATE-----Generated at Mon Mar 2 06:57:14 2026 by rpki-client